VYPR

CVEs

376,788 total · page 7423 of 7,536

AllCriticalHighKEV
  • CVE-2002-2374Dec 31, 2002
    Sun Corporation
    Patchpro
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."

  • CVE-2002-2375Dec 31, 2002
    CommuniGate Pro
    CommuniGate Pro
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL. NOTE: it is not clear whether this issue…

  • CVE-2002-2376Dec 31, 2002
    Leung
    E Guest
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name, (2) email, (3) homepage, and (4) location parameters. NOTE: this issue might overlap CVE-2005-1605.

  • CVE-2002-2377Dec 31, 2002
    Sephiroth32
    Zap Book
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field.

  • CVE-2002-2378Dec 31, 2002
    An
    HTTP
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page.

  • CVE-2002-2379Dec 31, 2002
    Cisco Systems, Inc.
    As5350
    risk 0.03cvss —epss 0.06

    Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor

  • CVE-2002-2380Dec 31, 2002
    Microsoft
    Network Firmware
    risk 0.01cvss —epss 0.11

    NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic.

  • CVE-2002-2381Dec 31, 2002
    Gtetrinet
    Gtetrinet
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remote attackers to casue a denial of service and possibly execute arbitrary code.

  • CVE-2002-2382Dec 31, 2002
    Cvsup
    Cvsup
    risk 0.00cvss —epss 0.00

    cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.

  • CVE-2002-2383Dec 31, 2002
    F2html.pl
    F2html.pl
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names.

  • CVE-2002-2384Dec 31, 2002
    Hotfoon
    Hotfoon
    risk 0.00cvss —epss 0.00

    hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service.

  • CVE-2002-2385Dec 31, 2002
    Hotfoon
    Hotfoon
    risk 0.03cvss —epss 0.04

    Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.

  • CVE-2002-2386Dec 31, 2002
    XOOPS
    Xoops
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag.

  • CVE-2002-2387Dec 31, 2002
    Mollensoft Software
    Hyperion FTP Server
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command.

  • CVE-2002-2388Dec 31, 2002
    Inweb
    Mail Server
    risk 0.00cvss —epss 0.01

    Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command.

  • CVE-2002-2389Dec 31, 2002
    TheServer
    TheServer
    risk 0.00cvss —epss 0.02

    TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files.

  • CVE-2002-2390Dec 31, 2002
    Trillian
    Trillian
    risk 0.00cvss —epss 0.06

    Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.

  • CVE-2002-2391Dec 31, 2002
    XOOPS
    Xoops
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.

  • CVE-2002-2392Dec 31, 2002
    Winamp
    Winamp
    risk 0.00cvss —epss 0.03

    Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.

  • CVE-2002-2393Dec 31, 2002
    Serv U
    Serv-U
    risk 0.00cvss —epss 0.03

    Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service (no new connections) via a series of MKD commands.

  • CVE-2002-2394Dec 31, 2002
    Trend Micro
    Interscan Viruswall
    risk 0.00cvss —epss 0.03

    InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.

  • CVE-2002-2395Dec 31, 2002
    InterScan
    VirusWall
    risk 0.00cvss —epss 0.03

    InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.

  • CVE-2002-2396Dec 31, 2002
    Advanced TFTP
    atftp
    risk 0.00cvss —epss 0.00

    Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.

  • CVE-2002-2397Dec 31, 2002
    Sygate
    personal firewall
    risk 0.00cvss —epss 0.02

    Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network address of 127.0.0.0.

  • CVE-2002-2398Dec 31, 2002
    Apboard
    Apboard
    risk 0.00cvss —epss 0.01

    The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter.

  • CVE-2002-2399Dec 31, 2002
    Cascadesoft
    W3mail
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

  • CVE-2002-2400Dec 31, 2002
    LibHTTPD
    LibHTTPD
    risk 0.04cvss —epss 0.08

    Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.

  • CVE-2002-2401Dec 31, 2002
    Microsoft
    Windows 2000
    risk 0.00cvss —epss 0.02

    NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs.

  • CVE-2002-2402Dec 31, 2002
    Surecom
    Ep 4501
    risk 0.00cvss —epss 0.02

    SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a default SNMP read/write community string of "secret," which allows remote attackers to read and modify router configuration information.

  • CVE-2002-2403Dec 31, 2002
    Key Focus
    Kf Web Server
    risk 0.03cvss —epss 0.03

    Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.

  • CVE-2002-2404Dec 31, 2002
    Curtis Specialty Consulting
    Iispop
    risk 0.03cvss —epss 0.03

    Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via a long request to the POP3 port (TCP port 110).

  • CVE-2002-2405Dec 31, 2002
    Checkpoint
    Firewall 1
    risk 0.00cvss —epss 0.01

    Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.

  • CVE-2002-2406Dec 31, 2002
    LiteServe
    LiteServe
    risk 0.00cvss —epss 0.02

    Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.

  • CVE-2002-2407Dec 31, 2002
    QNX
    Rtos
    risk 0.00cvss —epss 0.00

    Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bin/shutdown, (3) /sbin/fs-pkg, and (4) phshutdown by QNX experimental patches, (5) cpim, (6) vpim, (7) phrelaycfg, and…

  • CVE-2002-2408Dec 31, 2002
    Gordano
    Ntmail
    risk 0.00cvss —epss 0.01

    Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server.

  • CVE-2002-2409Dec 31, 2002
    QNX
    Photon Microgui
    risk 0.00cvss —epss 0.01

    Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID.

  • CVE-2002-2410Dec 31, 2002
    Open Webmail
    Openwebmail
    risk 0.00cvss —epss 0.01

    openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and…

  • CVE-2002-2411Dec 31, 2002
    Bannerwheel
    Bannerwheel
    risk 0.00cvss —epss 0.05

    Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd command.

  • CVE-2002-2412Dec 31, 2002
    Nullsoft
    Winamp
    risk 0.00cvss —epss 0.00

    Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.

  • CVE-2002-2413Dec 31, 2002
    WebSite Pro
    WebSite Pro
    risk 0.00cvss —epss 0.01

    WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name.

  • CVE-2002-2414Dec 31, 2002
    Opera
    Opera
    risk 0.00cvss —epss 0.01

    Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).

  • CVE-2002-2415Dec 31, 2002
    Alliedtelesyn
    Rapier 24
    risk 0.00cvss —epss 0.01

    Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero (null) bytes sent via UDP to a running service.

  • CVE-2002-2416Dec 31, 2002
    Zeroo
    Zeroo web server
    risk 0.03cvss —epss 0.06

    Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request.

  • CVE-2002-2417Dec 31, 2002
    Acftp
    Acftp
    risk 0.03cvss —epss 0.04

    acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.

  • CVE-2002-2418Dec 31, 2002
    Freeproxy
    Freeproxy
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in acFreeProxy (aka acFP) 1.33 beta 7 allows remote attackers to inject arbitrary web script or HTML via the URL, which is inserted into an error page.

  • CVE-2002-2419Dec 31, 2002
    Dctc Project
    Dctc
    risk 0.00cvss —epss 0.02

    Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of service (crash) via a string ending with a NULL byte character.

  • CVE-2002-2420Dec 31, 2002
    Independent Solution
    Super Site Searcher
    risk 0.03cvss —epss 0.06

    site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.

  • CVE-2002-2421Dec 31, 2002
    AcWEB
    acWEB
    risk 0.00cvss —epss 0.01

    acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.

  • CVE-2002-2422Dec 31, 2002
    Compaq
    Insight Management Agent
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message.

  • CVE-2002-2423Dec 31, 2002
    Sendmail, Inc.
    Sendmail
    risk 0.00cvss —epss 0.01

    Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.